Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: 9wyZ1km+CoHBhFFDdTuzswK7SKZCr7hNdUfWEnoQU/0=
Subject key identifier: 68:68:57:7E:5B:88:A3:4D:09:15:2D:73:58:B5:EE:9C:FA:27:A6:EF
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 0198D54E20D011C70B1DF67836DC47B8CB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0AB3
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: qrb/JSCddv6MmNaGDcjysqDj7ybeLbLjgwmrtFyA9D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:d0:11:c7:0b:1d:f6:78:36:dc:47:b8:cb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=6868577e5b88a34d09152d7358b5ee9cfa27a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:af:79:a4:c1:0f:45:f9:37:ae:53:19:87:
cc:2b:ba:1d:97:61:b4:55:f0:93:a3:ee:c9:b6:92:
80:a0:ea:f3:72:9d:5d:54:db:29:b2:a8:70:f9:15:
61:62:6c:e0:c4:e5:19:7b:96:18:9c:fa:e6:f6:b1:
ea:fe:96:0a:b4:d1:0d:aa:97:f5:4b:9e:99:f8:07:
ac:25:a2:db:12:85:b8:04:88:9d:c9:23:14:50:69:
b3:cd:53:41:e9:4e:b4:a2:42:6f:3d:0b:75:a6:f1:
26:f1:d3:3a:8b:d4:8d:db:51:fa:06:28:9c:8d:eb:
40:0f:2b:1b:95:b5:d2:96:ed:d1:d3:f6:5d:d9:ee:
7b:ba:51:24:99:f9:ad:73:83:1e:93:34:0f:2c:fa:
8b:40:81:2f:a9:29:8c:cf:eb:f2:d3:1a:eb:fd:c3:
80:72:0d:17:f7:36:68:ff:7b:45:38:f7:61:17:98:
73:08:14:33:b5:01:73:56:14:a0:4e:24:89:65:bb:
eb:f5:15:f4:db:c9:fd:4f:21:85:68:3b:b6:67:04:
12:49:4d:95:5b:22:f6:d3:0a:84:24:e0:ff:b0:88:
ac:e3:11:62:b4:f2:9b:a1:e7:19:78:cb:9c:9f:e4:
3b:77:d5:8d:ce:6f:42:db:fc:f7:41:5f:aa:16:77:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:57:7E:5B:88:A3:4D:09:15:2D:73:58:B5:EE:9C:FA:27:A6:EF
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e4:fe:e5:59:ed:35:f7:fb:a0:6c:dd:58:59:12:fd:2c:09:
d9:6e:cd:7d:85:d9:b0:38:19:0b:3d:79:f8:ce:33:3c:0f:27:
c4:0f:4e:b9:17:60:dd:1c:ee:9c:48:ff:c5:7e:4b:0d:1c:9c:
5d:8b:bb:15:9d:b0:9d:fb:00:3a:43:69:98:f2:8a:34:79:80:
b8:d8:2a:9f:56:ce:c5:89:38:e3:b2:d7:2c:76:62:06:3d:c2:
54:27:21:b3:48:27:6a:1c:19:f2:32:a1:4f:69:f8:30:8a:3b:
49:6d:1a:1a:7f:29:82:08:50:55:2f:75:43:8d:6d:f0:dd:00:
b3:54:e7:ea:89:a7:fa:8a:87:3d:16:c2:2d:92:46:48:97:8b:
90:dd:52:bc:70:a3:dc:76:17:ae:fa:e2:02:79:e9:87:22:91:
b3:b2:d4:a6:bd:47:d8:4d:5b:34:92:2f:13:21:28:58:63:3e:
5e:c9:94:38:80:e9:5c:6e:20:6c:89:45:f4:b3:5f:ac:f4:6d:
90:62:36:d8:9d:eb:64:e5:3b:09:87:ae:71:56:74:a7:e2:3c:
d9:0a:64:86:ae:37:e6:b9:83:01:fe:eb:2a:83:38:40:ec:a0:
05:86:2c:55:bc:3f:6f:c2:34:15:ac:79:d1:cd:75:0c:6f:cd:
d4:fb:8d:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiDQEccLHfZ4NtxHuMsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTdhMTVhYTk4OTNmMWM5MTViNDQ5N2ViZjkyYThhMzNk
NWU0MzkwHhcNMjUwODIzMDUwMjAzWhcNMjUwODI0MDUwMjAzWjAzMTEwLwYDVQQD
Eyg2ODY4NTc3ZTViODhhMzRkMDkxNTJkNzM1OGI1ZWU5Y2ZhMjdhNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB2veaTBD0X5N65TGYfMK7odl2G0
VfCTo+7JtpKAoOrzcp1dVNspsqhw+RVhYmzgxOUZe5YYnPrm9rHq/pYKtNENqpf1
S56Z+AesJaLbEoW4BIidySMUUGmzzVNB6U60okJvPQt1pvEm8dM6i9SN21H6Biic
jetADysblbXSlu3R0/Zd2e57ulEkmfmtc4MekzQPLPqLQIEvqSmMz+vy0xrr/cOA
cg0X9zZo/3tFOPdhF5hzCBQztQFzVhSgTiSJZbvr9RX028n9TyGFaDu2ZwQSSU2V
WyL20wqEJOD/sIis4xFitPKboecZeMucn+Q7d9WNzm9C2/z3QV+qFndigwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhoV35biKNNCRUtc1i17pz6J6bvMB8GA1UdIwQY
MBaAFJlXoVqpiT8ckVtEl+v5Kooz1eQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGIt
YmNkZGM0NGIwM2FiLzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGItYmNkZGM0NGIwM2Fi
LzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuT+5Vnt
Nff7oGzdWFkS/SwJ2W7NfYXZsDgZCz15+M4zPA8nxA9OuRdg3RzunEj/xX5LDRyc
XYu7FZ2wnfsAOkNpmPKKNHmAuNgqn1bOxYk447LXLHZiBj3CVCchs0gnahwZ8jKh
T2n4MIo7SW0aGn8pgghQVS91Q41t8N0As1Tn6omn+oqHPRbCLZJGSJeLkN1SvHCj
3HYXrvriAnnphyKRs7LUpr1H2E1bNJIvEyEoWGM+XsmUOIDpXG4gbIlF9LNfrPRt
kGI22J3rZOU7CYeucVZ0p+I82Qpkhq435rmDAf7rKoM4QOygBYYsVbw/b8I0Fax5
0c11DG/N1PuNcA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:57 2025 by rpki-client